Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: rfspVBDpLFErEhEiig5bs3qq+c0I8oWLEx03lREALS4=
Subject key identifier: 29:07:51:CE:ED:12:4B:82:86:64:DD:C5:AE:52:63:0D:D2:4F:92:E9
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 019A50E42CC3F2CB5C907B570168BF533D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 22:02:02 +0000
Manifest this update: Tue 04 Nov 2025 22:02:02 +0000
Manifest next update: Wed 05 Nov 2025 22:02:02 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: sIexTQA+ZO8KviBhuufwghhot4lQp1RBLUlnzbip2CA=)
2: C2lOXCmp50JxgRXiUYxe6B0_iZ4.roa (hash: 8UNsnDOqjjcGGg587BCaothe5brbvtl6qwWOiSpwE6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:2c:c3:f2:cb:5c:90:7b:57:01:68:bf:53:3d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: Nov 4 22:02:02 2025 GMT
Not After : Nov 5 22:02:02 2025 GMT
Subject: CN=290751ceed124b828664ddc5ae52630dd24f92e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:09:fc:82:90:72:46:11:92:f6:13:23:80:54:
c5:70:d1:a5:59:ad:82:83:01:88:bc:c9:8c:9c:bf:
66:34:cf:68:b0:f5:48:9e:33:21:f3:eb:47:b4:09:
f6:db:a3:36:53:2b:7a:13:60:35:74:a0:f3:55:37:
bf:3a:d1:be:fb:64:16:fb:e8:d0:3c:1c:76:a0:47:
f9:35:69:ce:d8:1d:0d:f5:ba:68:bd:b8:69:22:36:
24:f5:80:35:ff:eb:9e:14:b7:96:cb:f8:61:87:ec:
66:1d:d6:c0:2e:3f:82:27:ce:c1:e9:1c:9e:61:52:
ce:d5:6d:b6:79:ba:7c:43:7c:4f:a6:9b:43:0d:47:
97:45:45:fc:a1:e5:99:f9:2c:92:f5:c1:89:ec:05:
34:68:e3:e0:d6:a6:9e:ed:09:6b:d7:3b:e2:c1:c7:
b6:1a:34:55:ee:ed:58:dd:12:63:a1:29:d4:c9:5a:
3e:39:1d:c5:25:0f:1f:55:f3:f0:43:f1:0c:3c:3b:
79:23:fe:2c:62:af:9f:60:e9:95:28:d1:b9:74:5b:
24:9d:6c:88:45:45:91:02:09:23:d9:1f:b8:56:d2:
77:94:06:57:21:5f:af:85:6a:00:3a:fd:60:d3:0d:
b2:1f:df:c4:f4:4d:ab:cd:4b:6f:e5:f0:c5:8e:0d:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:07:51:CE:ED:12:4B:82:86:64:DD:C5:AE:52:63:0D:D2:4F:92:E9
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6e:8a:c1:f5:3d:aa:69:6c:16:eb:bf:8b:00:17:9f:1c:b7:
20:54:52:e2:a1:54:14:58:66:68:e2:d4:6d:8f:26:37:9a:09:
89:89:77:2b:32:0e:e4:2d:94:65:8c:45:97:02:60:4d:43:fa:
05:b1:60:6b:65:b1:eb:8f:20:39:c4:ff:9e:7f:80:d2:6f:bf:
29:c1:ce:26:cb:74:86:bb:ed:68:59:ac:d1:79:ed:9c:fc:cc:
db:56:5a:ed:91:8a:b0:00:ef:02:6c:17:26:df:30:b7:98:92:
3b:a2:24:47:11:56:4f:d1:9c:ad:88:6d:b5:ed:1d:1c:80:47:
be:84:64:7f:b4:80:96:69:62:6a:6a:bb:9d:a6:eb:db:57:2c:
e8:d6:f0:c7:63:5d:54:c6:63:9a:4e:57:8b:92:c0:2a:64:f2:
4b:06:48:ea:5c:8c:f5:f2:80:8d:e0:82:11:a6:8c:6e:98:63:
51:42:22:c2:e5:18:99:1c:66:38:7a:1e:c3:ab:46:2e:db:e5:
26:a8:a8:4b:50:b6:5c:8e:56:43:34:b2:a6:26:fe:2d:2d:5c:
4f:5b:cc:e4:52:67:97:98:a0:68:c7:d5:af:9d:13:dd:0b:f8:
b9:e0:20:73:ee:20:ca:a3:34:5d:8a:69:0d:03:bc:22:d0:3e:
a0:46:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:51:14 2025 by rpki-client